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ABSTRACT 

This paper deals with the "Calculus of Knowledge", an extension 
of the propositional calculus in which one may reason about what other 
people know. Semantic and Syntactic systems are developed, certain 
theorems are proven, and a formal solution in the system of a well- 
known reasoning problem is presented. 
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I. INTRODUCTION 


inxs paper deals with a calculus which enables one to formalize 
reasonings ^aboutwhat^ people know, as proposed by Dr. John McCarthy 
IR Memo, A Calculus of the Knowledge of Propositions 11 . V.'e 
treat tne Calculus of Knowledge as an extension of the propositional 
calculus^which permits propositions of a certain form to be inter¬ 
pretea, person S knows that proposition A is true". Following 
McCax ohy,.the precise formulation of this new system is restricted 
by requiring that the system have the following basic properties 
(motivated by our Intuitive notion of the nature of such reasoning 

modified by an attempt to keep this first version of a new logic 
reasonably simple): 

1. V.'hat anyone knows is true; 

2. For any proposition one knows whether one knows it; 

3. One knows any logical consequences of the other things one 
knows. By logical consequences" we mean all propositions Reducible 
xn the Calculus of Knowledge, since this Calculus is an attempt to 
formalize just such reasoning. In other words, the set of proposi¬ 
ng 01 " 13 which any person knows Is logically closed in the system, 
xherefore ahy person knows all tautologies in the system (which must 
Include all propositional-calculus tautologies). 


McCarthy proposed a model and an axiom schema for this calculus 
and he suggested certain problems and properties of his system which 
should be studied. However, the present author has shown the model 
to be inconsistent and would prefer to work with a somewhat different 
form of syntactic system. Therefore this paper deals with the fol¬ 
lowing n ew work (based on McCarthy's basic formulations and notation): 

1. The construction of a more direct (and, hopefully, correct) 
model will be described. * ' 

Viewing the Calculus of Knowledge as an extention of the 
Propositional Calculus, we have carried over concepts of implication 
and rules 01 deduction from a system of mathematical logic studied 

under Dr. Hartley Rogers, Jr. Some important theorems of the result- 
ing system will be proven. 

3« As an example of the use of the decision procedure, a formal 
solution to the three wise men problem" will be presented. 
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II. FORMULAS: 


The basic symbols to be used in formulas of the Calculus of 
Knowledge are the connectives 


*, ~ , A, V, =*, 

and the variables 

p, q, r, ... ^standing for propositions) 
S, S 1 , S“,...(standing for persons). 


Formulas are defined, in the calculus, as follows: 


If is a propositional variable, then is a formula 


or 


<X 


If of is a formula, then 
If 
.If 
If 
If 
If 


, 3 are formulas, 
, p are formulas, 
o,- , (3 are formulas. 


^ is a formula 

then r |>cA/^3 is q 


then 

then 




p are formulas , then L^«=*pJ 


o' 




L«VPJ is a formula 


is a formula 
is a formula 


c< is a formula and S is a people-variable, then [S*^] is a formula. 


(Motivation: "(S * °<3 tf Is to be interpreted as the propositional ex¬ 

pression^, "Person S knows that formula <=< is true". The remainder 
is the usual'"stfructure of the Propositional Calculus.) 


III. SEMANTICS: 

A. Motivation for structure of models 

In the Propositional Calculus, a model consists of any map¬ 
ping v of all propositional variables into the set {0,l} . Once such 
an assignment is made, the truth-values of all formulas are uniquely 
determined by a straight-forward truth-table analysis. Our problem 
here is more difficult since we interpret [S**-*'] as, "person S knows 
that formula ^ is true". Thus even after propositional variables 
have been assigned values certain additional arbitrary decisions 
must be made to allow different people to "know" different "facts" 
(or, equivalently, the same person to know different facts in dif¬ 
ferent models). However, the values of many formulas of the form 

are uniquely determined if they are to be consistent fcith the 
three basic properties of the calculus (as listed informally in the 
Introduction). The third property, in particular, indicates that 
what one knows may be determined by other things he knows, and there¬ 
fore the assignment to [S #0< ] depends on all assignments previously 
made to formulas of the form [S*£]. 

B. Construction of satisfying models 

Vie shall now describe how to construct a satisfying model 
for an arbitrary formula F. We shall then point out how that model 
could be extended to simultaneously satisfy additional formulas, and 
thus to be a full model for the calculus. First some definitions: 

Def: A base element ® df any formula which is either a propositional 
variable or a formula of the form [S*A]. 
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Def : A model = df an assignment v which maps base elements into the 
' 0.1- . This assignment must be made in a particular manner to 


be described below. 


D 




■'Vj 1 


Tf 


= df that mapping of all formulas into {o,lj which is 


determined in a natural way by the assignment ir; 
i.e., for any base element. - 7 " (<=w) ** 

IT /'A 4 p 

for any formulas, ri.([ c vA3]) = v 

‘ (_0 obherwise 

and similarly for the other Boolian connectives. 


n (°0 = 7 ^( 0 ) 


77 * 


# 


1 


Def : A formula A is a tautolog y = df in all possible models (i.e. for 

ail permissible assignments ir to the base elements which are subfor¬ 
mulas of A), 7 " (a) = 1. 

Def : B is said to be a cnnseauence of A = df in all possible models, 
if (A) = ' x > then r(B) = i. (We also say A implies B, or B is 

deducrble from A). (it follows immediately that A implies B if and 
only if [A =^3] is a tautology.) 

Def : B is said to be a consequence of a set of formulas = df in all 
possible models, if 7 ' ir (^±) = 1 every A. e CL , then ?^.(B) = 1. 

Def : A set of formulas d is logically closed = df for any formula 

A, if (2 implies A, then A t CL . 

• * » 


Let K be a formula which, at any stage during the construction 
of our model, has the following property: For any formula A, S 
"knows" A (i.e., the assignment 7 r([S*A]) = 1 is to be made), if and 
only if A is a consequence of K. Then, by adding conjuncts to K, we 
can increase the scope of S’s knowledge while satisfying the property 
that the set of propositions which S knows is logically closed (since 
it is just the set of consequences of K). 


Note 1 : We must insure that K remains consistent in order to obtain 
an interesting model. 


Note 2 : Since any formula has only a finite number of subformulas, 
thus only a finite number of base elements and a finite number of 
models, we can effectively test whether a formula is a tautology by 
simply enumerating the possible models. A systematic proceddre for 
doing this will be described below. 

Let be the set of formulas {b.} which are true but which S 
must not know (i.e. for which r(B, ) = 1, but the assignment 
7 r([S*B i ]) = 0 has been made). 

Note 3 « We cannot permit the formula [K=£B.] to be a tautology, for 
any Bs , for if it were the model would be inconsistent since 

[S*3.j would have to be mapped into both 0 and 1. 


First we assign to each formula a level. Formulas not involving 
any S*'s are .-issigned level 0. A combination of formulas by proposi¬ 
tional connectives is assigned a level equal to the highest of the 
levels of its components, and a formula S*A is assigned a level one 
greater than that assigned to A. Now with K initially the null form- 


id *£ the empty set, we construct an assignment m to base 


uxa ar 

elements of our formula 


11 


oase e^err. 


> A 4 n/ kj 


tne low.- 


evel 


or 

.,~ according 


w '-.V 


F as follows: First make assignments to ai 
level, then to those of the next higher 
0 following re SUiUC OXiS ♦ 


' J 


* « ’ 



t < I 


Kerne ° ( 


■ U C. 


9 — 5 


i) Assign ail propositional variables (base elements of level zero) 
0 or 1 arbitrarily. 


2) Assign formulas of the form r S*/r (higher level base elements) 

c* *] < ,%t • 

CL O jL C-’ _t, U V» O • 


a) 


If A is [S*B 


. or ~'[S*B] for any formula B, set 7r([S*A]) = i 
and replace K by [KAAj. 

b) if fK =>*3 is a fcAUSoLco* sal? tt([s*a]) = l. 

a) If [[KAA]~>B. ] Is a tautology for any 3* , set 

tt([S*AJ) = 0 and replace by r-f U a. x 

dj If r{ A) = 0, set tt([S*A]) ='0 

e) Otherwise, assign ir ([ S *A i) arbitrarily to 0 or 1. However, 

if tt([S*a 3) - 1, replace K by [KAA and if tt(lS*A]) = 0, replaced by 


/ 


UA. 


Now to extend this model to cover additional formulas, simply 
order the base elements of the next formula according to level. Then, 
keeping the K and c£? which resulted from the assignments thus far, 
assign all new propositional variables arbitrarily and proceed to 
assign other base elements as in 2) above. 


C. Semantic Decision Procedure 

We can test whether a formula is a tautology in the calculus 
by means of a truth-table format, by following rules a) thru e) above 
and addigg one line for each possible model. The details of the pro¬ 
cedure are presented by means of an example (Table 1), explained 
below, in which it is established that 

[[[S*[pVq]] A [S*~p]J [S*q]] 

is a tautology. The table is set up with one column for each base 
element (I, III, V) and Boolian connective (II, IV) at the top level 
of the formula being tested, and additional cotbumns for propositional 
variables (VI, VII), other relevant sub-expressions (VIII, IX), and 
the formula K and set for each model. Columns VI thru IX, lines 
± tnru are immediately generated by making all possible assign- 
ments to propositional variables. Then column V was chosen to be 

^ (I> HI > e>v V could be filled in in any order). The 

assignment 0 in lines 1 and 2 is determined by rule d). Lines 3 
and 4 are to be assigned arbitrarily, by rikle e). Thus they were 
assigned 0 and q placed under Jt , and also copies of lines 3 and 
4 thus far, with a .1 in column V and "q" added to K, were added to 
tne table (lines 5 and 6), so bhat all possible models are repre¬ 
sented. (We shall speak of this as the "splitting" of models.) 

Now column III is assigned values. Lines 1,3, and 5 each split 
generating lines 7, 8, 9. All previous assignments, including K and* 
are always carried along in the split and added to if necessary, 
in column I: Lines i and 7 are determined by d). Line 2 splits 
(generating 10). Lines 3 and 4 split, after we establish that 
UpVqJs^q] and LLpVq]=^~p] are not tautologies so that c) does not 
/ply. Lines 5, 6, and 9 do not split, since [q*»[pVq]] and 

:A ~p]=>[pVq] are tautologies (which can be established In similar 
smailer truth-sables), so the assignment is determined by b). In 

line 8, since [ IpALpVq] ] =?q] is a tautology, the assignment is 
determined by c). 

Now the remaining columns may be filled in in the usual way. and 
since--oolumn IV turns out to have all "l"s, the tautology is established. 
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IV 




T}. >T> VT’lTiT 
A9a 1 /l\ X _L 


■IS 



SYS 



j\ 


ReqwAs’pd propertie 


o 

O 


v-> a _ 


The‘models described above all satisfy the conditions 
quircd in the introduction to this paper, for the following reasons: 

-) "V/hat anyone knows is true." By rule d), [S*A] cannot be 
mapped into i unless A is mapped into 1. 

I 2) i'For any proposition one knows whether one knows it." 

Rule a) precisely covers this case. 

3) "One knows any logical consequences of the other thin 
knows. 1 This is satisfied since the set of things S knows is logical¬ 
ly closed (being the closure of a single formula K), in any one 
model. Formally, this condition is equivalent to establishing that 
the formula 


[ [ [ [ S*A] A [S*B]] A [[AAB] =*C]] 


[S*C]] 


is a tautology. This could be done as in the example above in III C; 
or one could use precisely the statement which was proven a tautology 
in the example if one established that 

[ [ S*A] A [S*B]] <=> [3 * [AAB]] 

is a tautology, and that "Substitutivity of Equivalence" is a legi¬ 
timate derived rule of the system (both of which are probably very 
easy tasks). 


B. Further Theorems 

Thm 1: The rules of deduction in this system are sound and (seman¬ 
tically) complete. 

Proof: Immediate from the usual definitions of soundness and 

completeness, since we have defined implication in terms of the 
satisfying models. 


Thm 2 : If Q. implies B, then there is a finite subset /S' Q CL such 
that S' implies B. 

PKQGF: Assume CL is infinite, Aq, A^_, ... £ CC. 


= [a 


Define 


0 




J 

^ n 


• • 


A n l . Suppose the theorem is false. Then for every 


finite S^cCL, it is not true that /S' implies B; 
i.e., there exists a model v such that 

^r(Sr) =1 and ^(B) = 0; 
i.e., there exists a model ir such that 

7^-(«>£^~'B) = 1, for any finite 
i.e., for every n, there exists a v such that 

r 7r(^'m~ B ) = i - 

We shall now show that this implies that there exists a particular 
model A such that for every n, ( x/ n ,~B) = 1; therefore 
' 7 'a(^>~ b ) = 1, which contradicts the assumption that CL implies B. 

Let Cq,C^,C 2 ,».. be any enumeration of all base elements ar-oear- 
ing in (~3,A 0 , A lf A 2 ,... } , listing first all base elements in ~B* 
then all those in Aq, etc., subject to the restriction that if CM is 
a subexpression of Cj, then i-^-j. !(This requires propositional vari¬ 
ables to appear before other base elements which contain them.) 

Let An = ® if, for every n (no matter how large), there exists 
a model A( n J such that rr ( n ) ( ~ B , J ) = 1 and A( n T(C,.) - 0. 

Jj0 h "ii T-? 'i r\ f* a >^T»r A on A * ^ 

(Me 


rs C- 


ce 


Hq = i otherwise^ 

_ ^A^?' = 1 * then ^ ) “ 1 for a11 171 - n *) 
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Therefore for every n, .there is a model X 

''<n) ( -3,- n ) » i"af.u xtfO (cj - X„. 


(n) 


n n o V-\ 4 * V* f~ *— 

O UOi 1 


o 


0 


X j ,/i 

J-+-a 


Now assume Xq, X^, ..., X^ have already been defined. 

f 0 if, for every n, there exists a model X^ tJ , constructed 

' according to the rules a) through e), such that the 

I following conditions all hold: 

•0 r x(n)(-'B, " * 

P) l( n )(C,) =X, for O^JSi 
(n) - J • J 


- ^ 




1 otherwise 


*) ^'( c i+ i)=°- 


(Note 2: By hypothesis, there always exists at least one model such 
that °^) holds. By the construction thus far, at least that model 
also satisfies 3) y _^Because of Note 1, for every n there exists at 

for which either 2) is 
=> 1. This choice deter- 


least one model Xv n ) satisfying °f) and £ 
also satisfied, or for every n, x(^l(C 


mines X i+1 .) 


1+1 


Define X by X(Ci) = \ for all i. 
Then 7\(~’ B,^ n ) - 1 for ill n. 

Then T'^(/-'B, ) *» 1, contradiction. 


qed 


V. THE WISE MEN PROBLEM 

As an example of the use of our decision procedure, a formal 
solution will now be presented to a classical problem in reasoning. 

Problem : Tnree wise men are told by their king that he has 

marked oheir foreheads with paint (white or black but not both), 
and that at least one of them has a white spot. The man are placed 
so that each can see the color painted on the foreheads of each of 
the others, but not the color of his own. The king asks the first 
and then the second wise man whether he knows the color of hlsownn 
spot, and received negative answers. The third wise man sees white 
spots on the foreheads of the other two. Prove that he (the third 

wise man) now has enough information to know that his own spot must 
be white. 

Solution : Call the wise men W 1 , W 0 , W,. Let ft, denote the 

proposition that W ± has a white spot. J ri 

We have not thus far discussed formulas involving more than one 
person-variable, but the extension is straightforward. In testinm 
for tautologies, me must keep track of separate book-keeping func¬ 
tions K and *<f,..for each person. ° 

V 

The problem will be solved if we can show that a certain formal 
statement is a tautology; namely, a statement to be Interpreted, 


f 




(I 


: V 

4 


^ v*. 

i 4 


W-> knows 
Problem, 


certain Tacts 
then V.'o knows 


described in the hypothesis of 
that his own spot is white". 


the 


• * t o 
.L * J 


Note that if Sp knows that Spjfcknows A, then Sp must also know 
A (since [S->*n] implies k\ Therefore it will be sufficient to hyno- 
thesis© thaw Wo knows just that W 2 has a white spot, plus that which 
Wp knows; namely, that W 2 doesn't realize that he has a white spot. 


but he 
that W 


knows 
doe 


s whether Wo has a white spot, that Wp has a v;hite 
sn’t know that he (Wp) has a white spot, that Wp k 


n >- 

O 


pot, 

knows 

whether W 2 and Wo have white spots, and that Wp knows there is at 
least one wh'ite^ spot. 

Formally, we consider the following statement: 

[W* 


{p 2 A ~ [W 2 *P 2 ] a[ [w 2 *p 3 3v[w 2 *^p 3 ]]a 

[w 2 *^p 1 &^[w 1 *p 1 ]a[[w 1 *p 2 ]v[w 1 *^p 2 ]]a[[w 1 *p 3 v[w 1 * —p 3 ] 3 A 

[w 1 *[p 1 vp 2 vp 3 3 3 ) 3 } 3 ■=£ [w 3 *p 3 3. 


(Brackets have been omitted where it is unambiguous to do so). To 
test whether this is a tautology by our decision procedure, we need 
not consider all models, but rather only all those which map the 
left side Into i, therefore only those which map each conjunct in 
the [ j into 1, therefore only those which also map each conjunct in 
the O into 1 (since for all other models the implication is auto¬ 
matically satisfied). The work is carried out in Table 2. 


By the above remarks and columns b and j, we need only consider 
models which map p^ and p 2 into 1. All other columns except a,h, and 
i, are also quickly determined by similar considerations. Since the 
expression in Table II b is a tautology, 11 must be zero and row 1 
is eliminated from consideration. Since the only model which maps 
} into 1 also maps p-. into 1, [{( => Po3 i-s a tautology, so that 

LVo*? 3 3 must be mapped^into 1 in the only model in which the hypo¬ 
theses are satisfied. Therefore we have shown that the third wise man 
knows his spot is white. 
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VI 


o ■> j X \ j. j U o X vj i * o 


^ -f 
Oi 


o 1 1 

1.*. 


The somantic decision procedure, involving the construction 


V *\ , % 9 ■* < T 

w O O 


* c* 


ible 


mod 


els 


is extremely long and awkwa r d. 


dr> ni"i 


'■'i Y 

o. 2 ►* o 


O t .it-. 


reouired can be found. 


It 


4 k ^ 

general rules for decreasing the work-,- - - - - - 

least in certain special cases, e.g. the wise men problem, much less 
than the full construction is really necessary. 

i 


The precise formulation add solution to the wise men problem 
seemed unnecessarily difficult largely because it was "unnatural", 
i.e. not the way people usually attack the problem. I believe this 
was necessary because we are working with the bare skeleton of a 
formal system. If some derived rules of inference are added, such 
as reducto ad absurdum, the cut rule, subordinate proof derivations, 
etc., proofs will be possible in fewer, more "natural", steps. 


This calculus is a first attempt to formalize an entire branch 
of common language usage — namely reasoning about reasoning. ^ It 
may be of interest to try to axiomatize the formalism into a Hilbert 
system, and investigate completeness of the resulting system, and 
how well it matches the intended model under standard interpretation. 
However, it is probably worthwhile to first generalize the system by 
adding quantifiers (to permit statements like, "There is an x such 
that for all S, S knows p(x).") 


Relationships betweentthis system and various model logics shou 
should also be studied. 


Eventually a system such as the one described above may be use¬ 
ful in enabling a computer to carry out the solution of reasoning 
problems, such as for example in the "advise taker" project. 
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